Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 6.0 | commons-httpclient | 3.1-9+deb6u2 |
Vulnerabilities 1
-
Medium —CVE-2015-5262 EPSS 19%
Denial of service vulnerability in org.apache.httpcomponents:httpclient
http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers to cause a denial of service (HTTPS call hang) via unsp…